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Remarks 

Reconsideration of this Application is respectfully requested. 

Upon entry of the foregoing amendment, claims 1-44 are pending in the 
application, with 1, 21, 34, 35, and 36 being the independent claims. Claims 1, 2, 5-9, 
12, 14, 28, 36, and 40-42 are sought to be amended. These changes are believed to 
introduce no new matter, and their entry is respectfully requested. 

Applicants believe the entry of the foregoing amendment should be allowed 
because it places the application in condition for allowance and/or reduces the issues for 
appeal without requiring further search or consideration or placing a burden on the 
Examiner. 

Based on the above amendment and the following remarks, Applicants 
respectfully request that the Examiner reconsider all outstanding rejections and that they 
be withdrawn. 

Improper Final Rejection 

The Examiner has made the instant Office Action final, stating that "Applicant's 
amendment necessitated the new ground(s) of rejection presented in this Office action." 
(Office Action, p. 21). M.P.E.P. § 706.07(a) states, "[u]nder present practice, second or 
any subsequent actions on the merits shall be final, except where the examiner introduces 
a new ground of rejection that is neither necessitated by applicant's amendment of the 
claims, nor based on information submitted in an information disclosure statement filed 
during the period set forth in 37 CFR 1.97(c) with the fee set forth in 37 CFR 1.1 7(p) " 
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The new ground of rejection of claims 1-35, which introduces a new reference, 

was not necessitated by Applicants' amendment of claims because the new reference is 

not used to teach or suggest the amended language. Moreover, the new rejection is not 

based on information submitted in an information disclosure statement. Accordingly, 

Applicants respectfully request that the finality of the instant Office Action be 

withdrawn. 

Rejections under 35 U.S.C. § 103 
Claims 1-35 

The Examiner has rejected claims 1-35 under 35 U.S.C. § 103(a) as being 
allegedly obvious over U.S. Patent No. 6,339,423 to Sampson et al. ("Sampson") in view 
of U.S. Patent No. 5,502,766 to Boebert et al. ("Boebert"), and further in view of U.S. 
Patent No. 6,892,306 to En-Seung et al. ("En-Seung"). For the reasons set forth below, 
Applicants respectfully submit that the Examiner has failed to establish a prima facie 
case of obviousness of claims 1-35 based on the combination of Sampson, Boebert, and 
En-Seung. 

Independent claims 1, 21, 34, and 35 each recite, e.g., the step of "upon 
successful authentication . . . retrieving at the first server machine a user key permitting 
access to an encrypted header of the secured item, the encrypted header including access 
rules for the secured item." 

The Examiner concedes that Sampson and Boebert do not teach or suggest the 
above-recited feature, but rather relies on En-Seung to allegedly teach this above-recited 
feature. (Office Action, p. 6). The Examiner cites to FIG. 19 and col. 3, 11. 14-32 of En- 
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Seung in support of this position. However, En-Seung neither in this section nor 

anywhere else teaches or suggests an "encrypted header including access rules" as 

recited in claims 1, 21, 34, and 35. Instead, En-Seung teaches the use of "key 

information" to generate a "user key," which in turn is used to generate a "temporary 

validation key" for encrypting and decrypting a "copyright protection protocol format." 

(En-Seung, col. 3, 11. 14-32; col. 4, 1. 52 - col. 5, 1. 43). None of the aforementioned 

elements of En-Seung can reasonably be understood by a skilled artisan as being "access 

rules" as recited in claims 1, 21, 34, and 35. 

Moreover, while En-Seung may disclose the step of "generating] user 

authorization information," this step cannot reasonably be understood by a skilled artisan 

as relating to the "access rules," recited in claims 1, 21, 34, and 35. (En-Seung, FIG. 19, 

S230). This is because in En-Seung, this "user authorization information" refers to 

"encryption key information." (En-Seung, col. 15,11. 13-16). Encryption key 

information is "information that is generated in the host server in response to the request 

of the service server when the user to be provided with the digital information is found to 

be unregistered with the host server." (En-Seung, col. 4, 11. 52-55; FIG. 20). This 

encryption key information is "used to generate a temporary validation key," and is 

"preferably generated by using random numbers." (En-Seung, col. 4, 11. 61-67). 

Additionally, En-Seung describes the process of generating a header, as shown in FIG. 

19 of En-Seung, but it is again for the purpose of encryption, as it "includes information 

necessary for encryption of the digital content." (En-Seung, col. 14, 11. 61-64). 

Accordingly, a skilled artisan would not understand the "user authorization information" 

of En-Seung to be "access rules" as recited in claims 1, 21, 34, and 35. 
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Therefore, as En-Seung fails to cure the deficiencies of Sampson and Boebert, 
Sampson, Boebert, and En-Seung cannot be used to establish a prima facie case of 
obviousness for claims 1, 21, 34, and 35. 

Accordingly, Applicants respectfully request that the Examiner reconsider and 
withdraw the rejection of claims 1, 21, 34, and 35, and find them allowable over the 
combination of Sampson, Boebert, and En-Seung. Also, at least based on their 
respective dependencies, claims 2-20 and 22-33 should be found allowable over the 
combination of Sampson, Boebert, and En-Seung for at least the aforementioned reasons, 
and further in view of their own respective features. 

Claim 36 

The Examiner has rejected claim 36 under 35 U.S.C. § 103(a) as being allegedly 
obvious over Stallings (Cryptography and Network Security) in view of Narasimhalu. 
For the reasons set forth below, Applicants respectfully submit that the Examiner has 
failed to establish a prima facie case of obviousness of claim 36 based on the 
combination of Stallings and Narasimhalu. 

Claim 36 recites, in part, that "based on information stored in an encrypted 
header of a secure item, a given requestor ... is only permitted to access the secure item 
through at most one of said local servers at a time." 

The Examiner states at page 4 of the Office Action that page 336 of the Stallings 
reference teaches, through the use of "session keys," accessing a secured item through at 
most one local server at a time, as recited in claim 36. However, the Examiner concedes 
Stallings does not teach or suggest "permitting access based on information stored in an 
encrypted header of a secure item," as recited in claim 36. (Office Action, p. 4). Rather, 
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the Examiner relies on Narasimhalu as allegedly teaching the use of a secret key to 

encrypt a secure item, and then storing the secret key in an encrypted header, which is 

then used to permit access, as recited in claim 36. (Office Action, p. 4). 

However, the Examiner's characterization of the limitation of Stallings' teachings 

is incomplete. Since Stallings does not teach or suggest "permitting access based on 

information stored in an encrypted header of a secure item," as recited in claim 36, as the 

Examiner concedes, Stallings also cannot teach or suggest "wherein, based on 

information stored in an encrypted header of a secure item a given requestor ... is only 

able to access the secure item using only a single one of said local servers or the central 

server," as recited in claim 36. Therefore, even assuming, arguendo, that Stallings limits 

access to a secured item through at most one local server at a time, and further assuming, 

arguendo, that Narasimhalu teaches permitting access based on an encrypted header, 

there is no teaching or suggestion in either applied reference of "a given requestor 

[being] only able to access the secure item using only a single one of said local servers or 

the central server" where this access restriction is "based on information stored in an 

encrypted header of a secure item," as recited in claim 36. 

For at least these reasons, the applied references cannot be used to establish a 
prima facie case of obviousness for independent claim 36. 

Accordingly, Applicants respectfully request that the Examiner reconsider and 
withdraw the rejection, and find claim 36 allowable over the applied reference. 

Claims 37-42 

The Examiner has rejected claims 37-42 under 35 U.S.C. § 103(a) as being 
allegedly obvious over Stallings in view of Narasimhalu, and further in view of U.S. 
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Patent No. 6,3 17,777 to Skarbo et al. ("Skarbo"). Applicants respectfully traverse this 

rejection. 

As noted above with regard to independent claim 36, the combination of Stallings 
and Narasimhalu do not teach or suggest that "based on information stored in an 
encrypted header of a secure item, a given requestor ... is only permitted to access the 
secure item through at most one of said local servers at a time," as recited in claim 36. 
At page 19 of the Office Action, Skarbo is used to allegedly teach an access control 
system coupled to an enterprise network to restrict access to secured files stored therein. 
Even assuming this interpretation is correct, which Applicants do not acquiesce to, 
Skarbo is not used to teach or suggest the above-recited distinguishing feature of claim 
36, and therefore Skarbo does not cure the deficiencies of the other applied references. 
For at least these reasons, independent claim 36 is not rendered obvious by the 
combination of Stallings, Narasimhalu, and Skarbo. 

Claims 37-42 depend from claim 36 and are therefore not rendered obvious by 
the combination of Stallings, Narasimhalu, and Skarbo for at least the aforementioned 
reasons for independent claim 36, and further in view of their own respective features. 

Claims 43 and 44 

The Examiner has rejected claims 43 and 44 under 35 U.S.C. § 103(a) as being 
allegedly obvious over Stallings in view of Narasimhalu, and in further view of Skarbo 
as applied to claim 37, and further in view of U.S. Patent No. 6,449,721 to Pensak 
("Pensak"). Applicants respectfully traverse this rejection. 

As noted above with regard to independent claim 36, the combination of 
Stallings, Narasimhalu, and Skarbo do not teach or suggest that "based on information 
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stored in an encrypted header of a secure item, a given requestor ... is only permitted to 
access the secure item through at most one of said local servers at a time," as recited in 
claim 36. At page 20 of the Office Action, Pensak is used to allegedly teach, which 
Applicants do not acquiesce to, secured files are secured by encryption. However, 
Pensak is not used to teach or suggest the above-recited distinguishing feature of claim 
36, and thus Pensak does not cure the deficiencies of the other applied references. 
Therefore, for at least these reasons, independent claim 36 is not rendered obvious by the 
combination of Stallings, Narasimhalu, Skarbo, and Pensak. 

Claims 43 and 44 depend from claim 36 and are therefore not rendered obvious 
by the combination of Stallings, Narasimhalu, Skarbo, and Pensak for at least the 
aforementioned reasons for independent claim 36, and further in view of their own 
respective features. 

Conclusion 

All of the stated grounds of rejection have been properly traversed, 
accommodated, or rendered moot. Applicants therefore respectfully request that the 
Examiner reconsider all presently outstanding rejections and that they be withdrawn. 
Applicants believe that a full and complete reply has been made to the outstanding 
Office Action and, as such, the present application is in condition for allowance. If the 
Examiner believes, for any reason, that personal communication will expedite 
prosecution of this application, the Examiner is invited to telephone the undersigned at 
the number provided. 
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Prompt and favorable consideration of this Amendment and Reply is respectfully 
requested. 

Respectfully submitted, 

Sterne, Kessler, Goldstein & Fox p.l.l.c. 

Glenn J. Perry (] ~ 

Attorney for Applicants 
Registration No. 28,458 

Date: 31 1 "X/yve ZCJog 

1 100 New York Avenue, N.W. 
Washington, D.C. 20005-3934 
(202) 371-2600 
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